Exploitation Fundamentals GPEN Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   In the context of a penetration test, what is the primary objective of the exploitation phase?

   • ATo patch or remediate the vulnerabilities discovered during the assessment
   • BTo map the network and enumerate open ports and services
   • CTo demonstrate the business impact of a vulnerability by gaining unauthorized access or control
   • DTo identify as many vulnerabilities as possible in the target environment
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What is the primary ethical requirement for a penetration tester before conducting exploitation activities?

   • AEnsuring the target system is not critical to business operations
   • BNotifying law enforcement before testing
   • CObtaining written authorization from the system owner
   • DUsing only open-source tools to avoid legal issues
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A penetration tester is assessing a network service that is known to be vulnerable to a buffer overflow. The tester wants to gain a shell on the target. Which exploitation technique is most directly applicable?

   • AUse a social engineering attack to trick an administrator into running a malicious script.
   • BExploit a misconfiguration in the service's default permissions to gain access.
   • CInject SQL commands into the service's input fields to retrieve credentials.
   • DCraft a malicious input that overwrites the return address to redirect execution to shellcode.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A penetration tester is in the post-exploitation phase of an engagement. The tester has gained a foothold on a target system and needs to gather additional information to identify other systems on the network. Which activity is most appropriate for this phase?

   • ARun a vulnerability scanner against the target system to identify additional vulnerabilities.
   • BWrite the final report and conclude the engagement.
   • CPerform network enumeration from the compromised system to identify other hosts.
   • DImmediately exploit other systems without further reconnaissance.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A penetration tester is assessing a legacy web application that concatenates user input directly into an SQL query. The tester wants to demonstrate the impact of the vulnerability without causing damage. Which technique is the most appropriate first step?

   • AUse a UNION-based injection to extract the entire user table.
   • BRun a time-based blind injection to enumerate all database names.
   • CInject a single quote to cause a database error and observe the error message.
   • DSubmit a payload that drops the current table to prove the vulnerability.
   Reveal Solution Discussion Select an answer first